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Abstract. The reachability problem for Vector Addition Systems (VASs) is a central 
problem of net theory. The general problem is known to be decidable by algorithms ex- 
clusively based on the classical Kosaraju-Lambert-Mayr-Sacerdote- Tenney decomposition. 
This decomposition is used in this paper to prove that the Parikh images of languages rec- 
ognized by VASs are semi-pseudo-linear; a class that extends the semi-linear sets, a.k.a. 
the sets definable in Presburger arithmetic. We provide an application of this result; we 
prove that a final configuration is not reachable from an initial one if and only if there 
exists a semi-linear inductive invariant that contains the initial configuration but not the 
final one. Since we can decide if a Presburger formula denotes an inductive invariant, 
we deduce that there exist checkable certificates of non-reachability. In particular, there 
exists a simple algorithm for deciding the general VAS reachability problem based on two 
semi-algorithms. A first one that tries to prove the reachability by enumerating finite se- 
quences of actions and a second one that tries to prove the non-reachability by enumerating 
Presburger formulas. 



Vector Addition Systems (VASs) or equivalently Petri Nets are one of the most popular 
formal methods for the representation and the analysis of parallel processes [2|. The reach- 
ability problem is central since many computational problems (even outside the parallel 
processes) reduce to the reachability problem. Sacerdote and Tenney provided in |10] a 
partial proof of decidability of this problem. The proof was completed in 1981 by Mayr 
[7J and simplified by Kosaraju [5] from |10[ [7J. Ten years later, Lambert[6j provided a 
more simplified version based on [5]. This last proof still remains difficult and the upper 
bound complexity of the corresponding algorithm is just known to be non-primitive recur- 
sive. Nowadays, it is an open problem wether an elementary upper complexity bound for 
this problem exists. In fact, the known general reachability algorithms are exclusively based 
on the Kosaraju-Lambert-Mayr-Sacerdote- Tenney (KLMST) decomposition. 

In this paper, by using the KLMST decomposition we prove that the Parikh images of 
languages recognized by VASs are semi-pseudo-linear, a class that extends the semi-linear 
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sets, a.k.a. the sets definable in Presburger arithmetic [3]. We provide an application of this 
result; we prove that a final configuration is not reachable from an initial one if and only if 
there exists a forward inductive invariant definable in Presburger arithmetic that contains 
the initial configuration but not the final one. Since we can decide if a Presburger formula 
denotes a forward inductive invariant, we deduce that there exist checkable certificates of 
non-reachability. In particular, there exists a simple algorithm for deciding the general VAS 
reachability problem based on two semi-algorithms. A first one that proves the reachability 
by enumerating finite sequences of actions denoting a path from the initial configuration to 
the final one and a second one that proves the non-reachability by enumerating Presburger 
formulas denoting inductive invariant containing the initial configuration but not the final 
one. 

Outline of the paper: Section [2] introduces the class of Vector Addition Systems (VASs). 
Section[3]recalls the class of Marked Reachability Graph Sequences (MRGSs) and the KLMST 
decomposition of languages recognized by VASs into finite unions of languages recognized 
by perfect MRGSs. Semi-pseudo- linear sets are introduced in Section |4j In Section [5j 
Parikh images of languages recognized by perfect MRGSs are proved to be pseudo-linear. 
In Section [6] we introduce the class of Petri sets a subclass of the semi-pseudo-linear sets 
stable by intersection with every semi-linear set. Reachability sets of VASs from semi-linear 
sets are proved to be Petri sets in this section. In Section [7] we study approximations of two 
pseudo-linear sets with an empty intersection. Finally in Section [8] we deduce that if a final 
configuration is not reachable from an initial one, there exists a forward inductive invariant 
definable in Presburger arithmetic that contains the initial configuration but not the final 
one. 

2. Vector Addition Systems 

We denote by Q,Q+,Z, N, respectively, the set of rational values, non- negative rational 
values, the set of integers and the set of non-negative integers. The components of a vector 
x £ Q n are denoted by (x[l], . . . ,x[n]). Let xi,X2,x £ Q n and r £ Q. The sum xi +X2 and 
the product rx are naturally defined component wise. Given a function / : E — > F where 
E, F are sets, we denote by f{X) = {f(x) \ x £ X} for every subset X C E. This definition 
naturally defines sets X x + X 2 and RX where X\,X 2l X C Q n and R C Q. With slight 
abuse of notation, {xi} + X 2 , X\ + {X2}, {V}V and R{x} are simply denoted by xi + X 2 , 
X\ + X2, rX and Rx. 

The lattice (N, <) is completed with an additional element T such that k < T for 
every k £ N U {T}. The set N U {T} is denoted by Nj- Given a non-decreasing sequence 
{xi)i>o in (Ny, <) we denote by \\mi^. +00 (xi) the least upper bound in Ny. The T element 
is interpreted as a "don't care value" by introducing the partial order < over Ny defined by 
x\ <! x 2 if and only if x\ = x 2 or x 2 = T. Orders < and < are extended component-wise 
over N T . The set of minimal elements for < of a set X C N n is denoted by min(V). As 
(N n , <) is a well partially ordered set, the set min(A) is finite and X C min(A) + N n for 
every X C N n . 

An alphabet is a non-empty finite set E. The set of words over S is denoted by £*. The 
empty word is denoted by e. The concatenation of two words o\ and a 2 is simply denoted 
by (T1CJ2. The concatenation of r > 1 times a word a is denoted by a r . By definition cr° = e. 
The number of occurrences of an element a £ S in a word a £ S* is denoted by |<r| a . The 
Parikh image of a word a over E is the function ||ct||e : S — )■ N defined by ||<t||s(q) = \o~\a 
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for every a G £. This function is simply denoted by ||cr|| when £ is known without every 
ambiguity. The Parikh image ||£|| of a language L C £* is defined as the set of functions 
||cr|| over the words a G £. 

A Vector Addition System (VAS) is a tuple V = (£, n, 5) where £ is an alphabet, n E N 
is the dimension, and 5 : £ — » is a displacement function. In the sequel, such a functions 
is naturally extended to a function <5 :£*—)• Z™ satisfying 5(e) = and 5(a) = Yli=i^( a i) 
for every word a = di . . . of k > 1 elements G S. A configuration is a vector in N n 
and an extended configuration is a vector in N™. For a G X, the binary relation Ay is 
defined over the set of extended configurations by x Ay x' if and only if x' = x + 5(a) with 
T + z = T by definition for every z G 7L. Let A; > 1. Given a word cr = a\ . . . of elements 
Oj € X, we denote by Ay the concatenation — ^>y ■ ■ • — ^>y. By definition Ay is the identity 
binary relation over the set of extended configurations. We denote by Ay the reachability 
binary relation over the set of extended configurations defined by x Ay x' if and only if 
there exists a G £* such that x Ay x'. Observe that in this case x[i] = T if and only if 
x'[i] = T. Intuitively the T element provides a simple way to get rid of some components 
of a VAS since these components remain equal to T. 

Definition 2.1. The reachability problem for a tuple (s, V, s') where (s, s') are two config- 
urations of a VAS V consists in deciding if s Ay s'. 

Let m, m' be two extended configurations. The language recognized by (m, V, m') is the 
set £(m, V, m') = {cr € £* | 3s, s' E N n s < m A s Ay s' A s' < m'}. Given two sets S, S' 
of configurations, the set posty(S') of reachable configurations from S and the set prey (S 1 ) 
of co-reachable configurations from S' are formally defined by: 

post v (S) = {s' e N n | 3s G S s Ay s'} 

pre v (5') = {s € N™ | 3s' G S' s Ay s'} 

Example 2.2. A VAS V = (Z,n,5) with £ = {a,b}, n = 2, 5(a) = (1,1) and 5(b) = 

( — 1,-2) is depicted in Figured Observe that s >v s ' withs= (0,2) ands' = (1,0). Note 

that post^({s}) = {x G N 2 | x[2] < x[l] + 2} and pre?, ({s'» = {x G N 2 | x[2] > 2(x[l]-l)}. 




Figure 1: A Vector Addition System. 

A graph is a tuple G = (Q, £,T) where Q is a finite set of states, £ is an alphabet, 
TCQxSxQisa finite set of transitions. A path ir is a word tt = t\ . . . tk of k G N 
transitions ti G T such that there exists Qo,---,Qk € Q arid there exists ai, . . . , a& G £ such 
that t{ = (qj~i,CLj,qj) for every 1 < j < k. In this case we say that tt is a path labeled by 
a = a\ . . . at from qo to In the sequel we denote by c/o Ag qk such a path ir. If the states 
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go and g^ are equal, the path tt is called a cyc/e on this state. As usual a graph is said to be 
strongly connected if for every pair of states (g, q') G Q x Q, there exists a path from q to q'. 

Remark 2.3. A Vector Addition System with States (VASS) is a tuple (Q, E, T, n, 5) where 
G = (Q,E,T) is a graph and V = (S,n,5) is a VAS. A pair in Q x N n is called a VASS 
configuration. Let a G E*. T/ie IMS',? semantics is defined over the VASS configurations 
by (g, s) -A (g',s') «/ and on/y z/ g -^>g (?' an d s ~>v s '- Afoie [1] i/iaf n-dim VASSs can be 
simulated by (n + 3) -dim 

Example 2.4. Recall i/iai sets posty(S') and prey(5") are definable in Presburger arith- 
metic FO (N, +, <) if S and S' are definable in this logic and n < 5. Moreover from [1] 
we deduce an example of a 6-dim VAS V and a pair of configurations (s, s') ^Ay such that 
neither posty({s}) nor prey({s'}) are definable in Presburger arithmetic. This example is 
obtained by considering the VASS depicted in Figure This VASS has a loop on state p 
and another loop on state q. Intuitively, iterating the loop on state p transfers the content 
of the first counter to the second counter whereas iterating the loop on state q transfers and 
multiplies by two the content of the second counter to the first counter. The third counter is 
incremented each time we come back to state p from q. In [5] the set of reachable configura- 
tions from (p, (1, 0, 0)) is proved equal to ({p} x {x G N 3 | x[l] + x[2] < 2 X I 3 ] }) U ({g} x {x € 
N 3 | x[l] + 2x[2] < 2 X I 3 1 +1 }). This set is not definable in Presburger arithmetic. 



The emptiness of £(m, V, m') can be decided with the Kosaraju-Lambert-Mayr-Sacerdote- 
Tenney (KLMST) decomposition. This decomposition shows that £(m, V, m') is effectively 
decomposable as a finite union UwgF^(^) where L(IA) is the language recognized by a 
perfect Marked Reachability Graph Sequence (MRGS) U. We provide in Section [3.11 a new 
definition of perfect MRGS that does not require complex constructions. This definition is 
proved equivalent to the original one [6] in Section [3.2i Finally in Section [3.31 we recall the 
KLMST decomposition. 

3.1. The Perfect MRGSs. In this section we introduce the class of Marked Reachability 
Graph Sequences (MRGSs) by following notations introduced by Lambert 0. We also 
provide a new definition for the class of MRGSs said to be perfect |6j. 



A reachability graph for a VAS V = (E, n,8) is a graph G = (Q,E,T) with Q C 
and T C {(q,a,q') G Q x E x Q \ q Ay q'}. A marked reachability graph A4 = 
(m, X, G, x',m') for V is a strongly connected reachability graph G for V equipped with 
two extended configurations x,x' G Q respectively called the input state and the output 



(0,0,0) 




Figure 2: A VASS taken from g]. 



3. The KLMST decomposition 
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state, and equipped with two extended configurations m, m' satisfying m < x and m' < x' 
respectively called the input constraint and the output constraint. An accepted tuple for A4 
is a tuple (s, ir, s') where ir = (x x') is a path in G labeled by a from the input state x 
to the output state x' and where s, s' € N n are two configurations such that s < m, s -^>y s' 
and s' < m'. Intuitively the graph G and the input /output states enforce a to label a path 
in G from x to x'. The input/output constraints enforce s[i] and s'[i] to be equal to m[i] 
and m'[i], respectively, if m[i] and m'[i] are not equal to the "don't care value" T. 
A marked reachability graph sequence (MRGS) for (m, V, m') is a sequence 

U = M^Mi . . . a k M k 

that alternates elements aj E S and marked reachability graphs AAj = (m^, Xj, Gj,x!j, m'-) 
with Gj = (Qj,T,,Tj) such that mo < m and m^, < m'. An accepted sequence for hi is a 
sequence (sj, TTj, s^)o<j<fe such that (sj,7Tj,Sj) is an accepted tuple for .Mj for every < 

j < k and such that Sj_ : — >y Sj for every 1 < j < k. The language recognized by hi is the 
set of words of the form a = O"o a l°l • • • a k°~k such that there exists an accepted sequence 
(sj,TTj, Sj)o<y<fe where 7Tj is labeled by <7j. This set is denoted by L{U). Since mo <! m 
and m^, < m', relations So < mo and s^, < m^, imply So < m and s^, < m'. In particular the 
inclusion L(U) C £(m, V, m') holds. 

Example 3.1. Let V = (S,n, 5) be a VAS and let (s, s') be a pair of configurations of 
V. Let us introduce an MRGS U such that L{U) = £(s, V,s'). We consider the graph 
G = (Q, E,T) where Q = {(T, . . . , T)} and T = Q x I] x Q, and the marked reachability 
graph M = (s, (T, . . . , T), G, (T, . . . , T), s'). Now just observe that the MRGS U = M 
satisfies L(U) = £(s,V, s'). 

Definition 3.2. An MRGSU is said to be perfect if for every c 6 N, there exists an accepted 
sequence (sj, TTj, 8j)o<j<k for hi such that for every < j < k: 

• s j[i] > c f or every i such that m.j[i] = T, 

Wj Wj 

• there exists a prefix Xj — >q . Xj of TTj and a configuration Yj such that Sj — >y Yj and 
such that Tj[i] > c for every i such that Xj[i] = T , and 

• ^ c f or every t GTj, 

• there exists a suffix Xj — >q . Xj of TTj and a configuration Yj such that — > v Sj and 
such that r'j[i] > c for every i such that Xj[i] = T, 

• s j [i] > c for every i such that m'j [i] = T . 

3.2. Original perfect condition. The perfect condition given in Definition 13.21 is proved 
equivalent to the original one 0. The original definition requires additional notions recalled 
in this section. These results are also used in Section [5] to establish the pseudo-linearity of 
Parikh images of language recognized by perfect MRGSs. 

Let M. = (m, x, G, x' , m') be a marked reachability graph. We say that A4 satis- 
fies the input loop condition if there exists a sequence (x x )c of cycles and a non- 
decreasing sequence (m c ) c of extended configurations such that m m c for every c and 
limc-^+oo m c = x. Symmetrically, we say that Ai satisfies the output loop condition if there 
exists a sequence (x' — x') c of cycles and a non-decreasing sequence (m' c ) c of extended 
configurations such that m' c -^>y m' for every c and linic^+oo m^. = x'. The following 
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Lemma [3.31 and Lemma [3.41 show that these conditions are in EXPSPACE since they reduce 
to covering problems [9]. 

Lemma 3.3. The input loop condition is satisfied by A4 iff there exist a cycle x x and 
an extended configuration y satisfying m — ^y y and satisfying y[i] > m[i] for every i such 
that m[i] < x[i]. 

Proof. Assume first that A4 satisfies the input loop condition. There exist a sequence 
(x — x )c of cycles and a non-decreasing sequence (m c ) c of extended configurations such 
that m — ^>y m c for every c cincl lini c _4.-|_ 0O m c = x. Let us consider the set / of integers i 
such that m[i] < x[i]. Let us prove that for every i E I there exists an integer q such that 
m c [i] > m[i] for every c > Cj. Let i £ I. Since m[i] < x[i] we deduce that m[i] € N and 
x[i] = T. From lim c ^+oo m c [i] = x[i] we deduce that there exists an integer a > such 
that m c [i] > m[i] for every c > q. Now let us consider an integer c such that c > Cj for 
every i 6 I. Observe that m c [i] > m[i] for every i E I. We have proved that there exist a 
cycle x x with w = w c and an extended configuration y = m c satisfying m -^>y y and 
satisfying y[i] > m[i] for every i such that m[i] < x[i}. 

Next, assume that there exist a cycle x x and an extended configuration y satisfying 
m -^>y y an d satisfying y[i] > m[i] for every i such that m[i] < x[i}. 

Let us prove that for every i such that m[i] > x[i] we have y[i] = m[i]. The relation 
m[i] < x[i] implies m[i] < x[i]. Thus m[i] = x[i]. The paths m -^>y y an d x ~~^V x with 
m[i] = x[i] provides y[i] = x[i]. We have proved that y[i] = m[i}. 

Therefore y > m and an immediate induction shows that there exists a non-decreasing 

sequence (m c ) c of extended configurations such that m -^-7>y m c . Finally, just observe that 
(x — >g x ) is a cycle and limc^+oo m c = x. □ 
Symetrically, we prove the following lemma. 

Lemma 3.4. The output loop condition is satisfied by A4 iff there exist a cycle x' x' 

and an extended configuration y' satisfying y' -^>-y m' and satisfying y'[i] > m'[i] for every 
i such that m'[i] < x'[i]. 

Let (q,q') a pair of states of a graph G = (<5,S,T). We say that a function fi : Q — > 
Q satisfies the Kirchhoff's laws of (q,G,q') if the following system X<?,G,g' holds where 
e : Q x Q — > {0, 1} denotes the function that takes the value one iff its two arguments are 
equal: 



The Parikh image ||7r|| of a path ir from a state q to a state q' in a graph G = (Q,T,,T) 
provides a function ||-7r|| that satisfies Xq,G,q'- Euler's Lemma shows that if G is strongly 
connected then every function fj, : T N\{0} satisfying the Kirchhoff's laws of (q, G, q 1 ) 
is the Parikh image of a path from q to q' . Since Xq,G,q does not depend on q € Q, this 
linear system is simply denoted by \G m the sequel. Naturally, the Parikh image of a cycle 
satisfies this linear system. 




V 




t=(p,a, Pl )€T 
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Let (sj,7Tj,Sj-)o<j<fc be an accepted sequence of an MRGS IA. Observe that £ = 
(sj, fj,j, s'j)o<j<k with fij = \\TTj\\ is a solution of the linear system given in Figure |3] where 
S(t) denotes 5(a) for every transition t = (q,a,q'). This linear system is called the charac- 
teristic system of IA. A solution £ of the characteristic system is called concretizable if there 
exists an accepted sequence (sj, TTj, Sj-)o<j<fc such that £ = (sj, \ \^j\\,s'j)j. The homogeneous 
form of the characteristic system, obtained by replacing constant terms by zero is called the 
homogeneous characteristic system of Li. This system is given in Figure [3j In the sequel, a 
solution of the homogeneous characteristic system is denoted by £o = (sq j , Hoj , s j )j . 



'for all 1 < j < k 
s' j _ l + 8(a j )=s j 

for all < j < k 

Sj + I>j(i)<5(i) =a'j 

< 

for all < j < k, 1 < i < n 
s£[i] = mj't*] if m£[i] € N 
for all < j < k 

Figure 3: On the left the characteristic syst' 
system. 



' for all 1 < j < k 
s o,j-i = s o,j 

for all < j < k 

< 

for all < j < k, 1 < i < n 
s o,j [i] = if m, [i] e N 
s^.[i]=Oifm;.[f]GN 

for all < j < k 
. On the right the homogeneous characteristic 



We say that IA satisfies the large solution condition if there exists a non-decreasing sequence 
(Cc)ceN °f solutions £ c = (sj jC , fj,j >c , s'j c )j with components in N of the characteristic system 
such that: 

• lim c ^ +00 Sj 7C = m, for every j, 

• limc^+oo Hj. c (t) = T for every j and t €Tj, and 

• lim c _ s> _|_ 00 Sj iC = m'j for every j. 

The following lemma shows that the large solution condition is decidable in polynomial 
time since the condition (i) of this lemma is in PTIME with the Hermite decomposition and 
the condition (ii) is in PTIME with the interior points method. 

Lemma 3.5. The large solution condition is satisfied by IA iff the following conditions (i) 
and (ii) hold: 

(i) Its characteristic system has a solution £ with components in Z, 

(ii) Its homogeneous characteristic system has a solution £o = ( s 0,j> A*0J; s o j)j with compo- 
nents in Q satisfying for every j: 

★ So > for every i such that mj[i] = T, 

•k Hoj(t) > for every t £ Tj, and 

•k Sq • [i] > for every i such that m' [i] = T . 
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Proof. Let us consider £ and £o satisfying condition (i) and (ii) . Since £o is the solution of a 
linear system, by multiplying £o by a positive integer, its components can be assumed in Z. 
Note that in this case the components are in fact in N. Since there exists an integer c > 
such that £ + c£o has its components in N, by replacing £ by £ + c£o we can assume that 
the components of £ are in N. Now, just observe that £ c = £ + c£o provides a sequence (£ c ) c 
that proves that W satisfies the large solution condition. 

Next assume that hi satisfies the large solution condition. There exists a sequence (£ c ) c 
proving the large solution condition of hi. Let us denote by £ = (sj,fj,j, s'j)j the first solution 
of this sequence. This solution naturally satisfies (i). Observe that there exists an integer 
c > such that for every j: 

• s,- c [i] > Sj[i] for every i such that xtij[i] = T, 

• (ij c {t) > f° r ever y t €Tj, and 

• Sj- C [i] > s^[i] for every i such that m^[i] = T. 

Notice that £o = £ c — £ provides a solution of the homogeneous characteristic system satis- 
fying condition (ii). □ 

By adapting [6], we deduce that the perfect condition given in Definition l3.2l is equivalent 
to the original one [6] (also equivalent to the ^-condition |5j). More formally, we prove the 
following Proposition 13.61 (the proof is given in Appendix |A} . 

Proposition 3.6. An MRGS U is perfect if and only if it satisfies the large solution con- 
dition and if its marked reachability graphs satisfy the input and output loop conditions. 



3.3. The KLMST decomposition. We provide an informal presentation of the algorithm 
deciding the emptiness of £(s, V, s'). This algorithm is based on a well-founded order C over 
the MRGSs. During its execution, a finite set F of MRGSs is computed. This set satisfies 
the invariant £(s,V, s') = (JweF^^O- Initially, the algorithm starts with the set F = {U} 
where U is an MRGS such that L{U) = £(s, V, s') (see Example 13. ip . Recursively, while the 
set F is non empty and it only contains MRGSs that do not satisfy the perfect condition, 
such an MRGS U is picked up from F. Since hi is not perfect, Proposition 13.61 shows that 
either it does not satisfy the large solution condition or one of its marked reachability graphs 
does not satisfy the input or the output loop condition. Considering separately these cases, 
the algorithm computes a finite set F' of MRGSs satisfying W C IA for every hi' £ F' and 
L(IA) = [Ji(i£p £>(tt')- Then, the algorithm replaces F by F\{U} U F' and it restarts the 
while loop. Since C is well-founded, the loop termination is guaranteed. When the loop 
terminates, the set F is either empty or it contains at least one perfect MRGS. If F is 
non empty the algorithm decides that £(s, V, s') is non empty, otherwise it decides that 
£(s, V, s') is empty. The correctness of the algorithm is obtained by observing that the 
language recognized by a perfect MRGS is always non empty. 

Now, let us assume that the while loop is continuing still there exists in F at least one 
MRGS that does not satisfy the perfect condition. The loop termination is still guaranty 
since C is well-founded and when the while loop terminates we get an eventually empty 
set F of perfect MRGSs such that £(s, V, s') = UweF^(^)- This algorithm provides the 
following Theorem 13.71 
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Theorem 3.7 (Fundamental Decomposition [HE]). For every tuple (s, V, s'), we can effec- 
tively compute a finite set F of perfect MRGSs for (s, V, s') such that: 

L(s,V,s')= (J L(U) 
UeF 



4. Semi-Pseudo-Linear Sets 



We introduce the class of semi-pseudo- linear sets. 

We first introduce the class of monoids. A monoid of Q" is a set M C Q n such that 
6 M and M + M C M. Observe that for every X C Q n , the set M = {0} U {£)£=i X, | 
> 1 A Xj £ X} is the minimal monoid that contains X with respect to the inclusion. 
This monoid is called the monoid generated by X and denoted X* . A monoid is said to be 
finitely generated if it can be generated by a finite set. 

Let M be a monoid. A vector a G M is said to be interior to M if for every x G M 
there exists an integer N > 1 satisfying iVa G x + M. The interior of a monoid M is the 
set of interior vectors to M. It is denoted by X(M). 



Example 4.1. Let P 

in Figure^ 



{(!,!),( — 1,1)}. The monoid M = P* and its interior are depicted 



O 6 



X — 6 



Figure 4: On the left a monoid M. On the right its interior T(M). 



The following Lemma [4.21 characterizes the set X{P*) where P is a finite set. 

Lemma 4.2. Let P = {pi, . . . , p fc } C Q n iw'tfi fc G N. We have 1(P*) = {0} if k = and 
T{P*) = P*n ((Q + \{0})pi + • • • + (Q+\{0}) Pfc ) if k > 1. 

Proof. Since the case /c = is immediate, we assume that k > 1. Let us first consider an 
interior vector a G I(P*). As X^i=iPj ^ ano - a ^ -^(-f*)> there exists TV > 1 such that 
Aa G (Ej=i Pi) + ^P*- Let p G P* such that Aa = Ylj=i Pj + P As p £ P*, there exists 
a sequence (Nj)i<j<k of elements in N such that p = Ylj=i NjPj. Combining this equality 
with the previous one provides a = Ylj=i 1+ n ] Pj ■ Thus a G (Q + \{0})pi +• • - + (Q + \{0})pfc. 

Conversely, let us consider a G P* l~l ((Q + \{0})pi H h (Q+\{0})pfc). Observe that there 

exists an integer d > 1 large enough such that da G (N\{0})pi + • • • + (N\{0})pfc. In 
particular for every x G P* there exists N > 1 such that Ada G x + P* . □ 
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A set L C Z n is said to be linear [3] if there exists a vector b G Z™ and a finitely 
generated monoid MCZ" such that L = h + M . A semi-linear set 5 C Z™ is a finite union 
of linear sets Lj C Z n . Recall [3] that sets definable in FO (N, +, <), also called Presburger 
sets, are exactly the non-negative semi-linear sets. By observing that integers are differences 
of two non-negative integers, we deduce that sets definable in FO (Z, +, <) are exactly the 
semi-linear sets. 

Let us now introduce the class of pseudo-linear sets and semi-pseudo-linear sets. Intu- 
itively, the pseudo-linear sets extend the linear sets, and the semi-pseudo-linear sets extend 
the semi-linear sets. More formally, a set X C Z n is said to be pseudo-linear if there exists 
b G Z n and a finitely generated monoid M C Z n such that X C b + M and such that for 
every finite set R of interior vectors to M, there exists x G X such that x + R* C X. In this 
case, M is called a linearizator for X and the linear set L = b + M is called a linearization 
of X. A semi-pseudo-linear set is a finite union of pseudo-linear sets. 

Example 4.3. I7ie set X = {x G Z 2 | < x[2] < x[l] < 2 X I 2 1} is depicted in Figured 
Observe that X is pseudo-linear and L = {x € Z 2 | < x[2] < x[l]} is a linearization 
of X. The set Y = {(2 fe ,0) | k G N} is not semi-pseudo-linear. However Z = X UY is 
pseudo-linear since L is still a linearization of Z. 




Figure 5: A pseudo- linear set. 



Remark 4.4. Every linear set L = b + M is pseudo-linear. M is a linearizator for L and 
L is a linearization of L. Every semi-linear set is semi-pseudo-linear. 

Remark 4.5. Semi-pseudo-linear sets can be empty whereas pseudo-linear sets cannot be 
empty. 

As expected, the class of pseudo-linear sets is stable by linear function images. A 
function / : Z n — > Z n is said linear if there exists a matrix A G Z nxn and a vector v G Z n 
such that /(x) = Ax + v for every x G Z n . 

Proposition 4.6. Images X' = f(X) of pseudo-linear sets X by a linear function f are 
pseudo-linear. Moreover L' = f(L) is a linearization of X' for every linearization L of X. 

Proof. Let us consider a linear function / : Z n — > Z n ' defined by a matrix A G Z nxn ' and a 
vector v G Z n . Let us consider a pseudo-linear set X C Z ra . As A is pseudo-linear, there 
exists a linearizator M of X and a vector b G Z n such that X C b + M. Let L = b + M. 
As M is finitely generated there exists a finite set P such that M = P* . We are going 
to prove that V = f(L) is a linearization of X' = f(X). Let us consider b' = /(b) and 
P' = {Ap | p G P} and observe that L' = b' + (P')*. In particular L' is a linear set. 
Since ICLwe deduce that X' C L' . Let us consider a set R' = {r^, . . . ,r' d } included in 
the interior of (P')* . As r^ G (P')* there exists pi G P* such that r^ = ^4pj. Lemma 14.21 
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shows that y\ is a sum of vectors of the form Aj iP Ap over all p G P where Aj iP > is a 
value in Q. There exists an integer rtj > 1 large enough such that rijAj jP G N\{0} for every 
p € P. We deduce that rj = Xlpgp n Ai, P P is a vector in P*. Moreover, from Lemma 14.21 
we deduce that rj is in the interior of P* . Let us consider the set R of vectors rj + fcjpj 
where ki is an integer such that < fcj < nj. As r, € T(P*) and pj G P* we deduce that 
Yi + kiPi G X(P*). We have proved that P C T(P*). As L is a linearization of X, there 
exists x G X such that x + R* C X. We deduce that /(x) + AP* C X'. Let us consider 
x' = /(x) + A(Yf i=l Yi) and let us prove that x' + (R')* C A". Consider r' G (R')*. There 
exists a sequence (/4)l<i<d of integers in N such that r' = ^i=iA f i r i- The Euclid division 
of by rij shows that ^ = fcj + UifMi where ^ 6N and < fcj < n,. From njr^ = ^4r, we 

deduce that x' + r' = /(x) + A(^jLi( r i + ^iPi) + £i=i /"j 1 "*)- Observe that rj + kiPi and rj 
are both in R. We have proved that x' + r' G /(x) + AR*. Thus x' + (J?')* CI', We have 
proved that L' is a linearization of A'. □ 



5. The Parikh Images of Perfect MRGSs 

The Parikh images of languages recognized by perfect MRGSs are proved to be pseudo-linear 
in this section. From the KLMST decomposition, we deduce the semi-pseudo-linearity of 
the Parikh image of £(m, V, m'). 

Let us consider a perfect MRGS U for (m, V, m'). We denote by H the solutions with 
components in N of the characteristic system of U. We consider the set of concretizable 
solutions H' . Since the Parikh image of C(U) is the image by a linear function of H', by 
Proposition 14.61 it is sufficient to prove that H' is pseudo- linear. Let us introduce the set Hq 
of solutions with components in N of the homogeneous characteristic system. We prove in 
the sequel that Hq is a linearizator for H' . First of all observe that Hq is a finitely generated 
monoid since Hq = Pq where Pq = min(Po\{0}); and Pq is finite since < is a well-order 
over Hq. 

Since H' C H, the following Lemma [5.11 shows that H' is included in (£ — £q) + Hq. We 
follow notations introduced in Definition 13.21 

Lemma 5.1. There exists £ G H and £q G Hq such that H C (£ — £ ) + Hq. 

Proof. As IA satisfies the large solution condition there exists £ G H. Moreover, Lemma 13.51 
shows that there exists a solution £q with components in Q of the homogeneous characteristic 
system satisfying the additional conditions Soj[i] > if va.j[i] = T, Sq„-[£] > if m^[i] = T, 
and fJ>oj(t) > for every t G Tj. By multiplying £o by a positive integer, we can assume 
that the components of £o are i n N. Note that for every £' G H, there exists c G N such that 
£' + c£o > £• As min(P) is finite, by multiplying £o by a positive integer we can assume that 
I' + £o > £ for every £' G P. That means H C (£ - £ ) + #o- □ 

Now, let us consider a finite set Po = {£ij • • • > £d} included in the interior of Hq. We are 
going to prove that there exists £ G P such that £ + Pq Q H'. We first prove the following 
lemma. 

Lemma 5.2. For every = (sjj, /xy, -)j interior vector of Hq, the function fj,ij is the 
Parikh image of a cycle ttij = (xj —-^Gj x j)- 
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Proof. Since U satisfies the large solution condition, Lemma [3 , 51 shows for every t &Tj, there 
exists a solution £o = ( s 0,j> MOJi s o j)j m Hq such that ^oj'(^) > 0. As Hq = Pq, for every 
t G Tj there exists £o G Po satisfying the same property. As £j is in the interior of Hq, Lemma 
4.21 shows that there exists a sequence (A^ )^ og p of positive rational values Ag G Q>o such 
that £i = Yj£ Ago^o- I n particular, we deduce that fiij(t) > for every t G Tj and for every 
< j < k. As satisfies \G we deduce that fii j satisfies the Kirchhoff's laws. As Gj is 
strongly connected and /J>ij(t) > 1 for every t G I}, Euler's Lemma shows that fn is the 



Parikh image of a cycle 7Ty = (xj — ^->Gj x j)- L~J 



Since Xj — '-ty, there exists an integer c > such that for every < j < k and for 
every configuration rj satisfying rj [i] > c if Xj [i] = T and rj [i] = Xj [i] otherwise, we have 

Tj > V . 

As U is perfect, there exists an accepted tuple (sj,iTj, s')o<j<fc such that for every j, 7Tj 
can be decomposed into: 

= (xj ' V;, Xj - ><;, Xj ■ > Gj Xj ! 

and such that the pair of configurations (rj,r^) satisfying the following relations: 

Sj ■ > v rj — > v iv ^y s ; 

also satisfy: 

• r j [i] > c if X-,- [i] = T and r j [i] = xj [i] otherwise, 

• r 'j [i] > c if x'j [i] = T and r'- [i] = x'- [i] otherwise. 

In particular we have rj — ^y for every < j < k and for every 1 < I < d. 

As Sij > and rj — ^>y we deduce that rj+sjj — ^>y. Moreover, from Sy+#(cTy) = ^ 
we get: 

As S;j, j > 0, an immediate induction shows that for every sequence m, . . . G N we 
have the following relation: 

d ni n r i d 

Ea, ...cr , a . _ — , 
n/S/ j >y rj + 2^ n t s ld 

i=i i=i 

Let £ = (sj, \\iTj\\, s^-)o<j<fc' We have proved that £ + Ylt=i n l£l ^ s concretizable. Thus 
£ + iig C H'. Therefore H' is pseudo- linear and Hq is a linearizator for H' . We have proved 
the following Theorem P 



Theorem 5.3. The Parikh image of L(U) is pseudo-linear for every perfect MRGSU. 

From Theorem 13.71 and Theorem 15.31 we deduce the following Corollary 15.41 
Corollary 5.4. The Parikh image o/£(m, V, m') is semi- pseudo -linear. 
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6. Petri Sets 

A set X C Z n is said to be a Petri set if X n S is semi-pseudo-linear for every semi-linear 
set S C Z n . Since Z n is a linear set, Petri sets are semi-pseudo-linear. However the converse 
is not true in general (see Example 16. ip . In this section, posty(S') and pre v (5") are proved 
to be Petri sets for every semi-linear sets S, S' C N n . This result is used in Section [8] to get 
a local analysis of posty(S') and pre v (S") with respect to some semi-linear sets. 

Example 6.1. Let us consider the pseudo-linear set Z = X U Y introduced in Example \4-3\ 
and observe that Z is not a Petri set since Y = Z H S is not semi-pseudo-linear with 
S =(1,0) + {(1,0)}*. 

Let us prove that posty(S') fl S' and S fl prey(S") are semi-pseudo-linear for every semi- 
linear sets S, S' Q N n . Since semi- linear sets are finite unions of linear sets we only prove 
this result for the special case of two linear sets S = s + P* and S' = s' + (P')* where 
s, s' G N n and P, P' C N n are two finite sets. We consider two alphabets Ep, Ep/ disjoint of 
E and a displacement function 5 defined over E = EpUEUEp/ that extends 5 such that: 

P = {5(a) \ a G Ep} P' = {—5(a) \ a G Ep/} 

We consider the VAS V = (E,n,5). Intuitively, since <5(Sp) C N n and 5(E P /) C -N n , words 
in £(s, V,s') can be reordered into words in (EpE*Ep,) n£(s,V,s'). More formally, we 
prove the following lemma. 

Lemma 6.2. Assume that s aa > y s' Zio/ds <j, it' € E* 7 and a € E. We have: 

• s aaa > y s' i/<5(a) > 0. 

• s 7,7 a > y s' 2/ 5(a) < 0. 

Proof. We only consider the case 5(a) > since the other case is symmetrical by replacing 
(s, V, s') by (&',— V, s) where —V = (E,n, — <5). Let us consider the pair of configurations 

(r, r') such that s -^>y r A-y r' — ^y s'. Since 5(a) > Owe have s A-y s+<5(a). As s+<5(a) > s 
and s -^>y we deduce that s + 5(a) Av s + 5(a) + 5(a). From r' = s + 5(a) + (5(a) we deduce 
the lemma. □ 

Let us consider the displacement functions / and /' defined over E by: 

| 5(a) if a £ Ep 



f(fl) 



f\a) 



otherwise 

—5(a) if a G Ep/ 
otherwise 



Lemma 6.3. We have post v (5)n5' = s'+/'(£(s, V, s')) and 5n P re v (5') = s+/(£(s, V, s')). 

Proof. Let us consider c' G posty(5) fl S' and let us prove that c' G s' + f'(£(s, V, s')). 
There exists c £ S and a word i> G E* such that c A-y c'. In particular c Ay c'. Since 
S = s + P* we observe that there exists a word u G Ep such that s Ay c. Symmetrically 

since S' = s' + (P')* there exists u' G Ep, such that c' ^->y s'. We have proved that 
uvu' G £(s, V,s'). Note that f'(uvu') = —5(u'). From s' = c' + 5(u') we have proved that 
c'Gs' + /'(£(s,V,s')). 
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Conversely, let us consider a vector c' G s' + f'(L(s, V, s')) and let us prove that c' G 
post v (S)nS". There exists a word a G £(s, V, s') such that c' = s'+/'(cr). Since <5(S P ) C W 
and <5(Sp/) C — N n , Lemma [6.21 shows that cr can be reordered into a word Co G £(s, V, s') H 
(SpS*Sp,). As a"o and a have the same Parikh image we deduce that f'{<j) = /'(co). In 
particular, we can assume without loss of generality that a = uvu' with u G T,* p , v G S* 

and u' G Sp,. Let us consider the two configurations c,c" such that s A-p c — >-p c" — >-p s'. 
As s' = c" + 5(u') and /'(cr) = —5{u') we deduce that c" = c'. Moreover, since u G Sp we 
deduce that c G S and since u' G Sp, we get c' G S". From v G X* we deduce c Ay c'. We 
have proved that c' G posty(5) D S'. 

Thus post v (5) nS' = s' + f'(L{s,V,s')). Symmetrically we get S n pre v (5') = s + 
/(£(s,V,sO). □ 

Observe that sets s' + /'(£(s, V, s')) and s + /(£(s, V, s')) are images by linear functions 
of the Parikh image of £(s, V, s'). Corollary 15,41 shows that the Parikh image of £(s, V,s') 
is semi-pseudo-linear. From Proposition 14.61 we deduce the following Theorem 16.41 

Theorem 6.4. posty(S') and pre v (S") are Petri sets for every semi-linear sets S,S' C N n . 



7. Pseudo-Linear Sets Intersections 

Let X\,X2 be two pseudo-linear sets with an empty intersection X\ n X2 and let L\,L2 
be linearizations of X\,X2- Since L\,L2 over-approximate Xi,X2, the intersection L\ n L2 
is not empty in general. In this section we introduce a dimension function that satisfies 
dim(Li n L2) < dim(A"i U X2). This dimension function is defined in Section [7.11 and the 
strict inequality is proved in Section f7.2l 

7.1. Dimension. A vector space V of Q n is a set V C Q n such that G V, V + V <^ V and 
QV C V. Observe that for every set ICQ" the set V = {0} U {X)i=i A i x « | ^ > 1 A G 
Q A Xj G X} is the minimal vector space that contains X with respect to the inclusion. 
This vector space is called the vector space generated by X. Recall that for every vector 
space V there exists a finite set B C V that generates V. The minimal integer d G N such 
that there exists a finite set BC7 with d elements that generates V is called the rank of 
V and denoted rank(V). Note that rank(y) G {0, . . . ,n} and for every set X C Q n there 
exists a finite set fiCI such that the vector space V generated by B is equal to the vector 
space generated by X and such that \B\ = rank(y). 

The dimension of a non empty set X C Q n is the minimal integer d G {0, . . . , n} such 
that there exist k G N, a sequence (Vi, . . . , Vfc) of vector spaces Vj C Q n , and a sequence 
(ai, . . . , afe) of vectors a^ G Q n such that X C [jf =1 (a 3 - + V^) and rank(V^) < (i. We denote 
by dim(A) the dimension of X. By definition dim(0) = —00. 

Example 7.1. Lei A = {(0,0)}, X 1 = {x G N 2 | x[l] = x[2]} and X 2 = {x G N 2 | 
x[2] < x[l]} be the sets depicted in Figure® We have dim(Ao) = 0, dim(ATi) = 1 and 
dim(X 2 ) = 2. 

Let us show some immediate properties satisfied by the dimension function. Ob- 
serve that dim(X) = —00 if and only if X is empty. The dimension function is mono- 
tonic dim(-Xi) < dim(X2) for every X\ C Moreover it satisfies dim(Ai U X2) = 



VAS REACHABILITY PROBLEM 



15 




dim(Xo) = dim(Xi) = 1 dim(X 2 ) = 2 
Figure 6: Dimension of some sets. 



max{dim(Xi), dim(X2)} and dim(Xi + X2) < dim(Xi) +dim(X2). Note also that dim(a + 
X) = dim(X) for every a G Q n . In the sequel, we prove that (1) rank(V) = dim(V) for 
every vector space V, (2) dim(M) = dim(^) for every vector space V generated by a monoid 
M, and (3) dim(L) = dim(X) for every linearization L of a pseudo linear set X. We first 
prove the following lemma. 

Lemma 7.2. Let M C Q n be a monoid and let (Vi, . . . , Vk) be a sequence of vector spaces 
Vj C Q n and let (ai, . . . , a&) be a sequence of vectors aj G Q n . If M C {Jj =1 (&j + Vj) then 
there exists j such that &j G Vj and MCaj+V,'. 

Proof. Let us observe that slj G Vj implies aj + Vj = Vj. We first prove that M C |Jj=i( a j + 
Vj) implies M C UjeJ^j' where J is the set of j G {1,. . . ,k} such that a^ G Vj. Let us 
consider m G M. Since M is a monoid we deduce that Ax G M for every A G N. In 
particular there exists j G {1, . . . , k} such that Ax G aj + V^- for infinitely many A. In 
particular there exist A < A' in N and v, v' G Vj such that Ax = aj + v and A'x = a^ + v'. 

Now, just observe that aj = v implies aj G Vj and x = j y j implies that x G Vj. 

Therefore M C \Jj eJ Vj. 

Now let us prove by induction over k G N>o that for every sequence (Vx,...,Vk) of 
vector spaces Vj C Q n , if M C Uj=i Vj then there exists j such that M C. Vj. The case 
A; = 1 is immediate. Assume that the lemma is already proven for an integer k G N>o- Let 
us consider a monoid M C Q n , a sequence (Vi, . . . , Vk+i) of vector spaces Vj C Q n such 
that M C (Jj=i ^j- Let us prove that there exists j G {1, . . . , k + 1} such that MC^-. 
Naturally if M C V^+i we are done. Thus, we can assume that M is not included in V^+i 
and we can pick a vector m G M\I4 +1 . Let x G M and let us prove that x G Uj=i Vj. Note 
that if x Vk+\ we are done. Thus, we can assume without loss of generality that x G V^+i. 
Let us introduce = x+ Am where A G N. Since M is a monoid that contains x and m we 
deduce that yA G M. Assume by contradiction that yA G Vk+i for A / 0. Since x and yA 
are both in Vk+i, and is a vector space, we deduce from m = -^(yA — x) that m G I4 + i. 

We get a contradiction with m Vf-+i- Thus yA G Uj=i Vj f° r ever y A G N>o- Hence there 
exists j G {1, . . . , k} such that yA G Vj for infinitely many A G N>o- In particular there 
exists A < A' in N>o such that yA,y^ £ Vj. As Vj is a vector space, from x = Ay y_^ yA we 
deduce that x G Vj. We have proved that M C (Jj=i Vj. From the induction hypothesis, we 
deduce that there exists j G {1, . . . , k} such that M CK. We have proved the property by 
induction. □ 

Now, we can prove the following results. 
Lemma 7.3. We have &\m(V) = rank(I^) for every vector space V . 
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Proof. Since V C + V we get dim(V) < rank(V). Conversely, there exists a sequence 
(Vi, . . . , Vk) of vector spaces Vj C Q n and a sequence (ai, . . . , ajt) of vectors a,- G Q n such 
that V C Uj = i( a i + Vj) and rank(Vj) < dim(F). As V is a vector space and in particular 
a monoid, Lemma 17.21 shows that there exists j such that V C aj + Vj and aj € Vj. From 
a,- + Vj = Vj we deduce that V QVj. In particular rank(F) < rank(Vj) and we have proved 
the other relation rank(F) < dim(V). □ 

Proposition 7.4. We have dim(M) = rank(V) where V is the vector space generated by a 
monoid M . 

Proof. Since M C V we get dim(M) < rank(V). Conversely, there exists a sequence a 
sequence (Vi, . . . , Vk) of vector spaces Vj C Q n and a sequence (ai, . . . , a&) of vectors aj G Q n 
such that M C (Jj=i( a i + ^i) an d rank(Vj) < dim(M). From Lemma 17.21 there exists j 
such that aj € Vj and M C aj +Vj. As aj € we get aj + Vj = Vj. We deduce that 
M C Vj. By minimality of the vector space generated by M, we deduce that V C Vj. In 
particular, rank(V) < rank(Vj). Since rank(Vj) < dim(M) we deduce the other relation 
rank(F) < dim(M). □ 

As expected, the dimension of a pseudo-linear set is equal to the dimension of every 
linearization. 

Lemma 7.5. We have dim(X) = dim(L) for every linearization L of a pseudo-linear set 

X c z n . 

Proof. There exists b € Z n and a linearizator M for X such that L = b + M. From 
X C L we deduce that dim(X) < dim(L). Let us prove the converse. Let us consider an 
interior vector a £ I(M). Since M is finitely generated, there exists a finite set P such that 
M = P*. Observe that R = {a} U (a + P) is a finite subset of I(M). As X is pseudo-linear, 
there exists x G X such that x + R* C A". Note that the vector space generated by R 
is equal to the vector space generated by P. Thus, from Proposition 17.41 we deduce that 
dim(P*) = dim(P*). As dim(x + R*) = dim(P*) and dim(b + P*) = dim(P*) we deduce 
that dim(x + R*) = dim(L). Since x + R* C X we deduce that dim(L) < dim(X). O 

7.2. Pseudo-linear sets with empty intersections. In this section we prove that lin- 
earizations L\ } Ij2 of two pseudo- linear sets X\,X2 with an empty intersection X\ 0X2 = 
satisfy the strict inequality dim(Li n L2) < dim(Ai U A2). Note that even if X\ n X2 = 0, 
the intersection L\ PI L2 may be non empty since L\, L2 are over-approximations of Xi, Xi- 

Example 7.6. Let us consider the pseudo-linear set X described in Example \4-3\ and a 
linearization L = {x G Z 2 j < x[2] < x[l]} of X. We also consider the linear set 
X' = (8,2) + {(1,0), (3,-1)}*. Sets X and X' are depicted together in Figured Note that 
L' = X' is a linearization of the linear set X' . Notice that X fl X' = 0. The set L D V 
is depicted in gray in Figured Observe that L n V = {(8, 2), (11, 1), (14, 0)} +{(1,0)}*. 
Therefore 1 = dim(L n V) < dim(A U X') = 2. 

We first introduce the class of groups. A group of Q n is a set Z C Q n such that G Z, 
Z + Z C Z and -Z C Z. Observe that for every X C Q n , the set G = X* - X* is 
the minimal group that contains X with respect to the inclusion. This group is said to be 
generated by X. Let us consider the group G = M — M generated by a monoid M and 
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Figure 7: Two pseudo-linear sets with an empty intersection. 

a£Z". Observe that a G Z(M) if and only if for every g G G there exists an integer N > 1 
such that g + iVa G M. 

Lemma 7.7. For every vector v € V where V is the vector space generated by a group G, 
there exists an integer d > 1 such that dv G G. 

Proof. As v G V, either v = or v can be decomposed into a finite sum v = Y2i=i ^iSi 
with k > 1, Aj G Q and gj G G. The case v = is immediate with (f = 1 and the second 
case is obtained by considering an integer d > 1 such that d\ G Z for every i. □ 

Lemma 7.8 ([3j). For ewery finite sets P±,P2 Q Z n there exists a finite set P C Z n stic/i 
i/iai P* Pi F 2 * = -f*- Moreover, for every h\, b 2 G Z n , i/iere exisfo a finite set B C Z™ suc/i 

i/iai (bi + ) n (b 2 + P*) = b + (p; n P*). 

Proof. Let us consider an enumeration p$ i, • • • ,Pi jfcj of the fcj > vectors in Pj where 
i G {1, 2}. If k\ = or if fc 2 = then P* = {0} or P 2 = {0} and the lemma is immediate. 
Thus, we can assume that k\, k 2 > 1- 

Let us consider the set X of vectors (Ai, A2) G N fel xN^ 2 such that h\+Y^j=l ^lblPiJ = 

t>2 + HjLi A2[i]p2,j- Let us also consider the set Xq of vectors (Ai, A2) G N fcl x N fc2 such 

that Xyj=i ^lblPlJ = Sj=i ^2[j]P2,j- Observe that A = Z + Ag where Z is the finite set 
Z = min(A) and Xq = Zq where Zq is the finite set Zq = min(Ao\{0}). 

Let us denote by B the finite set of vectors b € Z" such that there exists (Ai, A2) G Z 
satisfying bi + YljL\ Ai[j]pi,j = b = b2 + Y^j=i ^2[j]P2,j- Let us also denote by P the finite 
set of vectors p G Z n such that there exists (Ai, A2) G Zq satisfying YljLi ^i[i]Pi,i = P = 
Eili Hj]P2,j- Remark that (bi + Pj") n (b 2 + P 2 *) = B + P* and Pf n P 2 * = P* . □ 

We say that two linear sets Li,L 2 have a non- degenerate intersection if dim(Li) = 
dim(Fi n L2) = dim(L 2 ). 

Lemma 7.9. Let L\ = h\ + M\ and L2 = b2 +M2 be two linear sets with a non- degenerate 
intersection. There exist finite sets R\ C X{M\) and R2 C Z(M 2 ) suc/i f/iaf (xi + R^) D 
(x 2 +P2) / /or ewen/ (xi,x 2 ) G (L l7 L 2 ). 

Proof. As M\,M 2 are finitely generated, there exists some finite sets P\,p2 Q Z n such that 
Mi = P^ and M 2 = P£ ■ From Lemma 17.81 there exists a finite set P C Z n and a finite set 
B C Z n such that Pf n P 2 * = P* and Li n F 2 = B + P*. Note that B = is not possible 
since in this case dim(Fi n L 2 ) = —00. Thus there exists a vector b G B. 

Let us denote by V\ , V, V2 the vector spaces generated respectively by Pi , P, P2 and let 
us prove that V\ = V = V%- Proposition 17.41 shows that dim(Li) = rank(Vi), dim(Li (~l 
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L2) = rank(y) and dim(L2) = rank(T^). From dim(Li n L 2 ) = dim(Li) we deduce that 
rank(V) = rank(Vi). Moreover as P* C P* we deduce that V C V\. The inclusion V Q V\ 
and the relation rank(l/) = rank(V^) prove together that V = V\. Symmetrically we deduce 
that V = V 2 . 

We denote by Gi,G,G 2 the groups generated respectively by Pi,P, Pi- Note that the 
vector spaces generated by G\,G, G 2 are equal to V\, V, V 2 . 

Let a be an interior vector of P* and let us prove that a G I(P 1 *)nZ(i- > 2 *)- Let j G {1, 2}. 
Note that a G P* C jP*. Let p G Z(P*). Since — p € V and V is the vector space generated 
by G, Lemma 17,71 shows that there exists an integer d > 1 such that — dp G G. From 
a G Z(P*) we deduce that there exists A > 1 such that -dp + Aa G P* . From P* C P* 
we deduce that a G j?{dp + Pj)- From p G Z(P/) and Lemma l4~2l we get a G Z(P/). 

We define Ri and P 2 by Rj = {a} U (a + Pj) for j G {1,2}. Since a G Z(P*), Lemma 
14.21 shows that Rj C Z(P*). Let us consider xi G Zi and x 2 G Z 2 an d let us prove that 
(xi + R\) n (x 2 + R* 2 ) + 0. 

From h,Xj G hj + Pj* we deduce that Xj — b G Cry. As the group generated by Rj is 
equal to Gj , there exists rj , r'j G Rj such that Xj + r j = b + r^- . 

As V is the vector space generated by G\ and r 2 G P| C V 2 = V, Lemma [7. 71 shows that 
there exists an integer cq > 1 such that dir 2 G G\. As a G X(P*), there exists an integer 
Aq > 1 such that cqr 2 + Aqa G PJ*. As Pj" C R\ — Na, we deduce that there exists an integer 
A{ > such that cqr 2 + (Aq + A{)a G R\. We denote this vector by rq. Symmetrically, 
there exist some integers d 2 > 1, A 2 > 1 and A 2 > such that the vector d 2 r'i + (A 2 + A 2 )a 
denoted by r 2 is in R 2 . We get: 

xi + ri + (d 2 - l)ri + r'{ + (A 2 + A^)a = b + d 2 r[ + cqr 2 + (Aq + N[ + N 2 + A^)a 

x 2 + r 2 + (<q - l)r 2 + r' 2 ' + (Aq + Aq')a = b + cqr 2 + cferi + (A 2 + A 2 + Aq + Aq')a 

We have proved that these vectors are equal. Therefore (xi + R*) Pi (x 2 + P 2 ) 7^ 0. □ 

Proposition 7.10. Let L\,L 2 be linearizations of pseudo-linear sets X\,X 2 C TP 1 with an 
empty intersection X\ n A 2 = 0. We have: 

dim(Li n L 2 ) < dim(Ai U X 2 ) 

Proof. Let us consider linearizations Li,L 2 of two pseudo-linear sets Xi,X 2 such that 
dim(Li n L 2 ) > dim(Xi U X 2 ) and let us prove that X\ H A 2 ^ 0. Lemma 17.51 shows that 
dim(Aq) = dim(Li) and dim(A 2 ) = dim(L 2 ). By monotonicity of the dimension function, 
we deduce that dim(Li) = dim(Li PiL 2 ) = dim(L 2 ). Thus L\ and L 2 have a non-degenerate 
intersection. As L\,L 2 are two linear sets, there exists bi,b 2 G 7U 1 and two finitely gener- 
ated monoids M\,M 2 such that L\ = h\ + M\ and L 2 = b 2 + M 2 . Lemma 17.91 shows that 
there exist finite sets Pi C X(M\) and P 2 C Z(M 2 ) such that (xi + R*) n (x 2 + R* 2 ) ^ for 
every (xi, x 2 ) G (Li, L 2 ). As Li, L 2 are linearizations of the pseudo- linear sets Ai, A 2 there 
exists (xi,x 2 ) G (Xi,A 2 ) such that xi + P* C X% andx 2 + P 2 C X 2 . As (xi,x 2 ) G (Li,L 2 ) 
we deduce that (x x + R\) n (x 2 + R$) ^ 0. We have proved that A x n A 2 ^ 0. □ 
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8. Presburger Complete Separators 

The VAS reachability problem can be reformulated by introducing the definition of separa- 
tors. A pair (S, S') of configuration sets is called a separator for a VAS V if S x S' has an 
empty intersection with the reachability binary relation — >y. The set D = N n \(S U S") is 
called the (free) domain of (S, S'). A separator with an empty domain is said to be complete. 
We extend the inclusion relation over separators by (So, S' Q ) C (5, S") if So C S and S' C S". 

Complete separators can be characterized by introducing the forward and backward 
invariants. Let us consider the following sets for every pair (S, S") of configurations sets and 
for every a G X: 

post v (5) = {s' G N n | 3s G S sA v s'} 
pre$(S') = {s G N n | 3s' G S' s4 v s'} 

A set S C N n is called a forward invariant if posty(S') C 5 for every a G X. A set 5" C N n 
is called a backward invariant if prey(S") C S" for every a G X. Note that a pair (S,S') of 
configuration sets is a complete separator if and only if (S,S') is a partition of N n , S 1 is a 
forward invariant and 5" is a backward invariant. 

In this section we prove that Presburger separators are included in Presburger com- 
plete separators. In general (posty(S'), prey(S")) is a separator that is neither complete nor 
Presburger (see Example 12. 4p . That means, this separator must be over-approximated by 
another one. 

Remark 8.1. In the sequel, we often use the fact that a pair (S,S') of subsets of N n is a 
separator if and only if posty(S') n prey(5") = if and only if posty(S') PI 5" = if and only 
i/5n P re*(5') = 0. 

Lemma 8.2. Let (So,S' Q ) be a Presburger separator with a non-empty domain Dq. There 
exists a Presburger separator (S, S') with a domain D such that So C S, S' C S' , and such 
that: 

dim(L>) < dim(L> ) 

Proof. We first define a set S' that over-approximates S' and such that (So, S') is a separator. 
As So is semi-linear, Theorem 16.41 shows that posty(So) is a Petri set. As Do is semi-linear, 
we deduce that posty(So) H -Co is equal to a finite union of pseudo-linear sets X\, . . . ,Xk. 
Let us consider some linearizations Lj, . . . of these pseudo-linear sets and let us define 
the following Presburger set S' . 

k 

S' = S'oU{Do\{[jL J )) 

i=i 

We observe that posty(5 )nS" = since posty(So) n S' = and post v (S ) HD C \J k j=1 Lj. 
We have proved that S' contains S' and (So,S ! ) is a separator. 

Now we define symmetrically a set S that over-approximates So and such that (S, S') 
is a separator. As S' is semi-linear, Theorem 16.41 shows that prey(S") is a Petri set. As Do 
is semi-linear we deduce that Dq H prey(S") is equal to a finite union of pseudo-linear sets 
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X[ , . . . , XL . Let us consider some linearizations L\ , . . . , L' k , of these pseudo-linear sets and 
let us define the following Presburger set S. 

k' 

S = S U (D \( |J L' jt )) 
j'=i 

Once again, note that 5 D prey (5") = 0. Thus S contains So and (S, S') is a separator. 

Let D be the domain of the separator (S,S'). From Do = N n \(So U S' ), we get the 
following equality: 



D = D n n 



U ( L i n 4 



l<j'<k' 



\ 



J 



From C D we get dim(X j U X' y ) < dim(L> )- As Xj C post v (S ) C post£(S) and 

-X'j/ S pre v (5") and (S, S') is a separator, we deduce that Xj and X'-, are two pseudo-linear 
sets with an empty intersection. Proposition 17.101 provides dim(Lj n L'-,) < dim(Xj U Xj,). 
We deduce dim(D) < dim(Do)- □ 

An induction over the dimension of the domain D of a Presburger separator provides 
the following Theorem 18.31 thanks to Lemma 18.21 



Theorem 8.3. Presburger separators are included in Presburger complete separators. 

As ({s},{s'}) is a Presburger separator if (s, s') ^— >y, the previous theorem shows that 
there exists a Presburger complete separator (S, S') that contains ({s}, {s'}. By considering 
I = S, the following Corollary 18.41 is proved. 

Corollary 8.4. Let (s,s r ) be a pair of configurations of a VAS V. We have (s, s') 0A>y if 
and only if there exists a Presburger formula denoting a forward invariant I such that s £ I 
and s' ^ I. 



9. Conclusion 

Thanks to the classical KLMST decomposition we have proved that the Parikh Images of 
languages recognized by VASs are semi-pseudo- linear. As an application, we have proved 
that for every pair (s, s') of configurations in the complement of the reachability relation 
there exists a Presburger formula ^>(x) denoting a forward invariant / such that s £ / and 
s' /. We deduce that the following algorithm decides the reachability problem. 

Reachability^ s , V , s' ) 

k <- 

repeat forever 

for each word a € S fc 

if s — >v s 

return "reachable" 
for each Presburger formula ?/>( x ) °f length k 
if ip(s) and ^tl>(s') are true and 

ip(x) A y = x + 5(a) A ->ift(y) unsat Vo G S 
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return "unreachable" 
k <- k + 1 

The correctness is immediate and the termination is guaranteed by Corollary 18,41 This al- 
gorithm is the very first one that does not require the classical KLMST decomposition for 
its implementation. Even though the termination proof is based on the KLMST decompo- 
sition, the complexity of the algorithm does not depend on this decomposition. In fact, the 
complexity depends on the minimal size of a word a € X* such that s -^>y s' if s Ay s', 
and the minimal size of a Presburger formula ip( x ) denoting a forward invariant I such that 
s G I and s' / otherwise. We left as an open question the problem of computing lower 
and upper bounds for these sizes. Note that the VAS exhibiting a large (Ackermann size) 
but finite reachability set given in [8] does not directly provide an Ackerman lower-bound 
for these sizes since inductive separators can over-approximate reachability sets. 

We also left as an open question the problem of adapting the Counter Example Guided 
Abstraction Refinement approach [1] to obtain an algorithm for the VAS reachability problem 
with termination guarantee. In practice, such an algorithm should be more efficient than 
the previously given enumeration-based algorithm. 
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Appendix A. Proofs of Proposition 13.61 

An MRGS is said to be original-perfect if it satisfies the large solution condition and its 
marked reachability graphs satisfy the input and output loop conditions. 

Even if the proof of the following lemma is immediate by induction over the length of 
w,w', it is central in the KLMST decomposition. 

Lemma A.l (Continuity). 

• For every x -H>y there exists an integer c > such that y -^>y for every extended config- 
uration y satisfying y[i] > c if x[i] = T and y[i] = x[i] otherwise for every i. 

• For every — >y x' there exists an integer d > such that — y' for every extended 
configuration y' satisfying y'[i] > c' ifx'[i] = T and y'[i] = x'[i] otherwise for every i. 

Lemma A. 2. Perfect MRGSs are original-perfect. 

Proof. Let us consider a perfect MRGS U. Notice that U satisfies the large solution condition 
since from every accepted sequence (sj,7Tj, s')j we deduce a solution (sj, ||7Tj||,Sj) c . Since 
the input loop condition and the output loop condition are symmetrical, we just prove that 
the marked reachability graph Mj satisfies the input loop condition. We consider an integer 
c 6 N satisfying c > m,-[i] for every i such that < Xj[i]. Since IA is perfect, there exists 

an accepted sequence (sj,7Tj, Sj)o<y<fc, a prefix Xj — U-y Xj of itj, an extended configuration 
Tj such that Sj — ^>y r,- and such that Tj[i] > c for every i such that x,-[i] = T. Since Sj <!mj 

Wj 

we deduce that Sj < mj. As sj — >y rj and Sj < mj there exists an extended configuration 

yj such that mj — 4-y yj . Let us prove that yj [i] > mj [i] for every i such that mj [i] < Xj [i] . 
Let i be such an integer. Since mj < Xj and mj [i] < Xj [i] we deduce that mj [i] £ N and 
Xj[i] = T. From Xj[i] = T we deduce that Tj[i] > c. From mj[i] E N we deduce that 
Sj[i] = m.j[i]. Thus yj[i] = i"j i\ > O Sj [i] — mj [i] . Lemma 13.31 shows that A4 j satisfies 
the input loop condition. □ 

Now, let us consider an original-perfect MRGS IA and let us prove that IA is perfect. 
Since A4j satisfies the input and output loop conditions, Lemma 13.31 and Lemma 13.41 show 
that: 

• there exist a cycle 9j = (xj —^Gj x j) an d an extended configuration yj satisfying both 
mj ^>y yj and yj[i] > mj[i] for every i such that mj[i] < Xj[i], 

w 'j 

• there exist a cycle 9- = (x^- — >Gj x j) an d an extended configuration y'- satisfying both 

w 'j 

y'j — >y m'j and y'j [i] > m^- [i] for every i such that rrij [i] < x'j [i] . 

The proof that IA is perfect is obtained by first exhibiting a solution £ with components in 
N of the characteristic system and a solution £o with components in N of the homogeneous 
characteristic system satisfying some particular properties. These two solutions £ and £o are 
respectively defined in Lemma lA.31 and Lemma [A. 41 

Lemma A. 3. There exists a solution £ = (sj, fj,j, s'j)j of the characteristic system such that 
for every j: 

Wj 

• Sj is a configuration satisfying Sj — >y, 
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• fj,j is the Parikh image of a path ttj = (x.j — 

w 'j 

• s'j is a configuration satisfying — >y Sj. 



Proof As rrij — ^>y, Lemma I A . 1 1 shows that there exists an integer c > such that s,- 




for every configuration Sj satisfying Sj[i] > c if m_j[i] = T and Sj[i] = otherwise for 

every i. Symmetrically, as — ^-y m 'j, Lemma I A. II shows that there exists an integer d > 

w 'j 

such that — >y s'a for every configuration s^- satisfying s'j [i] > d if m^ [i] = T and s^- [i] = too!- [i] 
otherwise for every i. Since IA satisfies the large solution condition there exists a solution 
£ = (sj, Hj,s'j)j with components in N of the characteristic system such that Sj and s'- 
satisfies the previous conditions and such that (J>j{t) > 1 for every t €.Tj. As Gj is strongly 
connected, Euler's Lemma shows that \ij is the Parikh image of a path ttj = (xj — U-Qj x' ). □ 

Lemma A. 4. There exists a solution £o = (soj> A*Q,jj s o,j) °f the homogeneous characteristic 
system such that for every j : 

• the value Soj[i] is strictly positive if mj[i] = T and it is equal to otherwise for every i, 

• t/ie value (soj + <5(iUj))[^] is strictly positive ifxj[i] = T and it is equal to otherwise for 
every i, 

• Mo,j — (H^j'H + * s ^ e Parikh image of a cycle ttqj = (xj — ^>Gj x j) anc ^ Kojlt > 
/or every t G Tj, 

• t/ie ra/tie (s ■ — <5(iUj))[i] is strictly positive ifx'j[i] = T and it is egua/ to otherwise for 
every i, and 

• t/te va/ue Sq •[«] is strictly positive i/m'-[i] = T and it is equal to otherwise for every i. 

Proof. As IA satisfies the large solution condition, Lemma 13.51 shows that there exists a 
solution £o = ( s OJ}A*0,j) s oj)j with components in Q of the homogeneous characteristic 
system satisfying the additional constraints Soj[i] > if = T, s' •[«] > if m^[i] = T, 

and Hoj{t) > for every t E Tj. By multiplying £o by a positive integer, we can assume that 
£o is a solution with components in Z satisfying the additional constraints. We are going to 
prove that there exists a positive integer c > 1 such that c£o satisfies the lemma. 

First of all, observe that for every c > 1 and for every j: 

• the value csojfi] is strictly positive if m»[i] = T and it is equal to otherwise for every i, 

• the value cs , [i] is strictly positive if m^[i] = T and it is equal to otherwise for every i. 

Let us consider 1 < i < n. Let us prove that there exists a positive integer Cj > 1 such that 
for every c > q the value (csqj + fi(u>j))[i] is strictly positive if Xj[i] = T and it is equal to 
otherwise. Note that m,-[i] <Xj[i] thus either mj[i] = Xj[i] € N, or (rrij [i] , Xj [i] ) S N x {T}, 
or mj[i] = Xj[i] = T. We separate the proof following these three cases. Let us first 
consider the case rrij [i] = xj [i] € N. As rrij [i] € N and £o is a solution of the homogeneous 
characteristic system, we get So,j[i] = 0. The cycle 6j shows that Xj + 5(wj) = Xj. From 
Xj[i] 6 N we deduce that S(wj)[i] = 0. In particular (csq j + 5(wj))[i] = and we have 
proved the case mj[i] = xj[i] € N by considering a = 1. Let us consider the second case 
(rrij[i],Xj[z]) € N x {T}. As rrij[i] € N we deduce that S(w[*] = 0. Since itij[i] < Xj[i] the 
condition satisfied by the loop 9j shows that yj[i] > mj[i]. As yj[i] = mj[i] + 5(vjj)[i], we 
deduce that <5(t/;j)[i] > 0. In particular for every c > 1 we have (csoj + S(wj))[i] > and we 
have proved the case (rrij [i] , Xj [i] ) G N x {T} by considering q = 1. Finally, let us consider 
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the case m 3 -[i] = = T. As mj[i] = T we deduce that So,j[i] > in particular there 

exists an integer a > 1 large enough such that (cSq j + <5(u;j))[i] > for every c > Cj. We 
have proved the three cases. 

Symmetrically, for every 1 < % < n, there exists an integer d i > such that for every 
c > d i the value (cSq ■ — 5 (tOj ) ) [i] is strictly positive if x^- [i] = T and it is equal to otherwise. 

Finally, as Hoj(t) > for every t £ Tj and for every < j < k, we deduce that there 
exists an integer c > 1 large enough such that cnoj(t) > \Qj\t + \0j'\t f° r every t € Tj and for 
every < j < k. Naturally, we can also assume that c > Cj and c > for every 1 < i < n. 
Let us replace £o by c£o- As /J>oj(t) — \9j\t + |#j'|t > for every t G Tj, Euler's Lemma shows 

that /io,j — (H^jll + H^jll) i s the Parikh image of a cycle 7To,j = (xj °' i > g j Xj). □ 

Let us fix notations satisfying both Lemma IA.3I and Lemma IA.4I We now provide 
technical lemmas that prove together that U is perfect. 

Lemma A. 5. For every c > we have: 

Sj + cs ,j — >v s j + c ( s oj + S(wj)) 

(w'.y 

Sj + C(s 0) j - <5(Wj)) Sj + CSq j 

Proof. Since the two relations are symmetrical, we just prove the first one. The choice of 
£ satisfying Lemma IA.3I shows that Sj — Let us consider c £ N and let us prove by 
induction over c' that for every < d < c we have: 

Sj + cs ,j — Sj + (c - c')s ,j + c (s ,j + 6(wj)) 
Naturally, the case d = is immediate. The induction is obtained just by observing that 

Wj 

so,j > 0, So,j + <5(^j) > and Sj — ?>y. Q 

Lemma A. 6. There exists cq > suc/i i/iai /or ewery c > Co' 

Sj + c(s ,j + o"Oj)) Sj + c(s' 0J -o"Oj)) 

Proof. Since there exists a path in Gj from Xj to x^- we deduce that Xj [i] = T if and only if 
= T. We denote by Uj the vector in {0, l} n satisfying Uj[i] = 1 if Xj[i] = T = x^[z] and 
satisfying u.j[i] = otherwise. From the choice of £o satisfying Lemma [A. 41 we observe that 
s o,j + o~(wj) > Uj and s' 0j — <5(u/) > Uj. Note that lim c ^. +00 (sj + cuj ) = Xj. As Xj -—^g 3 x j) 

Lemma I A. II proves that there exists an integer Co > such that Sj + cqUj — '-±v- Now, let 
us consider an integer c > cq. Let us prove by induction over d that for every < d < c, 
we have: 

Sj + c(s ,j + 5(wj)) 



Sj + (c - c )(s ,j + S(wj)) + c (s'oj - <5(u>j)) 

Naturally, the case d = is immediate. Assume the previous relation holds for an integer 
d such that < d < c and let us consider c" = d + 1. From Sqj + 5(wj) > Uj and 
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s o,j ~~ $( w j) — u i we deduce that (c — c')(soj +S(wj)) +c?(s' j — S(w'j)) > cuj > coiij. Thus, 
the induction directly comes from Sj + cqiij — ^->v an d s o,j + 5 {wj ) + <5(°"0,j ) + 5 (w'j ) = Sq • . □ 

Lemma A. 7. There exists d > suc/i /or ewery c > c': 

s i + c ( s o,j - 5 K ) ) -^v sj- + c(s' j - 5 (w'j ) ) 

Proof. As lim c ^ +00 (sj +c(sq j — S(w'j))) = x!j and Xj — U-Qj x^-, Lemma [A . 1 1 proves that there 

exists d > such that — (s^- + c(s' j — 5(Wj))) for every c> d . Since Sj + 5(<jj) = s'j we 
are done. □ 

Now, let us consider an integer c > satisfying c > cq and c > d where cq and c' are 
respectively defined by Lemma I A, 61 and Lemma I A, 71 For each < j < k, we consider the 
following path: 

= (xj • \,\ x; > f; . x ; > Gj xj) 

We have proved that (sj + csoj, vr J)C , s^- + cSq^j is an accepted sequence for ZY. Thus U is 
perfect. 
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